Re: Axis C++ 1.6 client app connecting using https through http proxy

[Klitos Kyriacou]

Thanks! That issue seems to have been open for two years. Hopefully,
your useful test report will help to move things on.

Klitos

Re: Axis C++ 1.6 client app connecting using https through http proxy

[Klitos Kyriacou]

On 04/02/2009, McCullough, Ryan rmccullo...@rightnow.com wrote:
 Can you open a jira on this issue? I have reproduced the problem.

Thanks Ryan, that's great, but I'm not sure how to use Jira. I'm a
beginner with Apache products. Is it easy to use if I haven't used it
before?

Klitos

Axis C++ 1.6 client app connecting using https through http proxy

[Klitos Kyriacou]

Hi, this is my first post, I've searched the list but couldn't find
the answer to my problem.

I have installed Axis C++ 1.6, Xerces and OpenSSL on Windows XP, and
set up the environment variable AXISCPP_DEPLOY and edited
axiscpp.conf.

I am trying to make an HTTPS connection to a web service through an
HTTP proxy. I can connect successfully using Axis for Java, but I also
want to do it in C++. In C++, I have code similar to the following:

MyWebService api;
api.setProxy(199.172.46.58, 8080);
addCredentialsHeader(api, username, password);  // local function
that constructs a header
api.myMethod();

I do the above inside a try block. When the application calls
myMethod(), it catches the following exception:

Axis exception 23:
 HTTPTransportException:Unknown Transport Exception error:140770FC:
   SSL routines:SSL23_GET_SERVER_HELLO:unknown protocol

I used Wireshark to see what's being sent through the network. First,
I checked with the Axis Java application, which works ok. It sends a
plain-text HTTP CONNECT request to the proxy server. The proxy server
then responds and the encrypted text is subsequently sent to the web
service through HTTP tunneling.

When I use Wireshark with my equivalent Axis C++ application, I can
see that it connects to the proxy server and then sends what looks
like random binary data instead of a CONNECT request. Could it be
encrypting it prematurely? Obviously, the proxy server doesn't
understand it, so it sends back an HTTP 500 Server Error.

Can anyone give me any help? Has anyone successfully managed to
connect to an HTTPS service through an HTTP proxy?

Thanks,
Klitos

Re: Axis C++ 1.6 client app connecting using https through http proxy

[Klitos Kyriacou]

Hi Ryan,

Yes, communication to and from the proxy server is unencrypted HTTP
requests and responses. As for whether the communication from the
proxy server to your web service is encrypted, I am not sure as I am
not an expert on HTTP. As I understand it (and my understanding here
is very vague), the client sends an HTTP CONNECT request to the proxy
server and that establishes a way of talking to the final destination
(web service) using HTTP tunneling. I think this means the client
continues to send plain-text HTTP requests to the proxy server but the
payload data is encrypted. I can send traces, if you need them, on
Monday when I get back to work.

Thanks,
Klitos


On 23/01/2009, McCullough, Ryan rmccullo...@rightnow.com wrote:
 Nadir,

 I think in HTTPTransport::setProxy( const char *pcProxyHost, unsigned int 
 uiProxyPort)

 You need to force the unsecure channel to be used.

 Klitos, is it true that all communication to the Proxy server is unencrypted, 
 but the communication from the proxy server to your web service is encrypted?

 -Ryan

 -Original Message-
 From: Nadir Amra [mailto:a...@us.ibm.com]
 Sent: Friday, January 23, 2009 3:49 PM
 To: Apache AXIS C User List
 Subject: Re: Axis C++ 1.6 client app connecting using https through http proxy

 Klitos,

 I am willing to work on this if you help me understand what needs to be
 done.   There is an issue about tunneling here:

 http://issues.apache.org/jira/browse/AXISCPP-899

 Maybe if you send me the traces and/or point me to something that tells me
 how this is suppose to work I can take a look into it.



 Nadir Amra


 Klitos Kyriacou klitos.kyria...@gmail.com wrote on 01/23/2009 09:26:09
 AM:

  [image removed]
 
  Axis C++ 1.6 client app connecting using https through http proxy
 
  Klitos Kyriacou
 
  to:
 
  axis-c-user
 
  01/23/2009 09:26 AM
 
  Please respond to Apache AXIS C User List
 
  Hi, this is my first post, I've searched the list but couldn't find
  the answer to my problem.
 
  I have installed Axis C++ 1.6, Xerces and OpenSSL on Windows XP, and
  set up the environment variable AXISCPP_DEPLOY and edited
  axiscpp.conf.
 
  I am trying to make an HTTPS connection to a web service through an
  HTTP proxy. I can connect successfully using Axis for Java, but I also
  want to do it in C++. In C++, I have code similar to the following:
 
 MyWebService api;
 api.setProxy(199.172.46.58, 8080);
 addCredentialsHeader(api, username, password);  // local function
  that constructs a header
 api.myMethod();
 
  I do the above inside a try block. When the application calls
  myMethod(), it catches the following exception:
 
  Axis exception 23:
   HTTPTransportException:Unknown Transport Exception error:140770FC:
 SSL routines:SSL23_GET_SERVER_HELLO:unknown protocol
 
  I used Wireshark to see what's being sent through the network. First,
  I checked with the Axis Java application, which works ok. It sends a
  plain-text HTTP CONNECT request to the proxy server. The proxy server
  then responds and the encrypted text is subsequently sent to the web
  service through HTTP tunneling.
 
  When I use Wireshark with my equivalent Axis C++ application, I can
  see that it connects to the proxy server and then sends what looks
  like random binary data instead of a CONNECT request. Could it be
  encrypting it prematurely? Obviously, the proxy server doesn't
  understand it, so it sends back an HTTP 500 Server Error.
 
  Can anyone give me any help? Has anyone successfully managed to
  connect to an HTTPS service through an HTTP proxy?
 
  Thanks,
  Klitos